Knowledge MaxxingPurpose limitation
Purpose limitation is using personal data only for the specific purpose it was originally collected for, rather than repurposing it for something unrelated later.
Prerequisite: Data minimisation
What matters
Without this constraint, data collected for one reason, like providing a service, can quietly be reused in ways the person never agreed to or expected.
Example
Data collected to process a delivery shouldn't later be reused to build an advertising profile, unless that additional use was clearly disclosed and agreed to.
Common misconception
Purpose limitation is not satisfied just by having a valid original reason for collecting data; every later use of that data also needs to fit within the original stated purpose.
Recall question
What can go wrong for a user if purpose limitation isn't respected after data is collected?